An applet may be downloaded or provided to a web browser when a user visits a site in order to protect data input by the user from being captured by malicious software, such as key loggers. The applet may present a user input field in the web browser and may generate a random sequence of low-level key stroke or mouse click events within the input field when the user enters information, such as a username and/or password. A listening key logger will receive a large amount of random data, whereas the applet will receive and buffer the actual user data that may be communicated to a remote site access by the user.
|
1. A method of obfuscating input data received from a user in a user interface on a computer by loading an applet within the user interface, the method performed by the applet and comprising:
receiving user input data in an input field from a user;
generating additional obfuscatory data in the input field combined with the user input data while the user input data is being input in the input field, the obfuscatory data representing one or more keystroke events;
retrieving, from the input field that stores the user input data combined with the generated additional obfuscatory data, at least the user input data; and
presenting only the retrieved user input data to a remote server for processing a user transaction.
8. A non-transitory computer-readable medium encoded with computer-readable instructions for obfuscating input data received from a user in a user interface on a computer by loading an applet within the user interface, said computer-readable instructions comprising instructions that:
receive user input data in an input field from a user;
generate additional obfuscatory data in the input field combined with the user input data while the first input data is being input in the input field, the obfuscatory data representing one or more keystroke events;
retrieve, from the input field that stores the user input data combined with the generated additional obfuscatory data, at least the user input data; and
present only the retrieved user input data to a remote server for processing a user transaction.
13. A system for obfuscating input data received from a user in a user interface on a computer by loading an applet within the user interface, comprising:
a user computer accessible by a user, said user computer having a user interface;
an applet loaded within said user interface, said user interface including an input field adapted to receive user input data from the user, said applet:
generating additional obfuscatory data in said input field combined with the user input data while the user input data is being input in the input field, the obfuscatory data representing one or more keystroke events; and
retrieving, from the input field that stores the user input data combined with the generated additional obfuscatory data, at least the user input data; and
a remote server, in communication with said applet, said applet presenting only the retrieved user input data to said remote server for processing a user transaction.
2. The method according to
3. The method according to
generating numeric additional obfuscatory data in response to determining that the input field is adapted to receive numeric input data; and
generating alphanumeric additional obfuscatory data in response to determining that the input field is adapted to receive alphanumeric input data.
4. The method according to
5. The method according to
6. The method according to
7. The method according to
9. The non-transitory computer-readable medium according to
10. The non-transitory computer-readable medium according to
generate numeric additional obfuscatory data in response to a determination that the input field is adapted to receive numeric input data; and
generate alphanumeric additional obfuscatory data in response to a determination that the input field is adapted to receive alphanumeric input data.
11. The non-transitory computer-readable medium according to
12. The non-transitory computer-readable medium according to
14. The system according to
15. The system according to
16. The system according to
17. The system according to
|
The present application is a continuation application of U.S. patent application Ser. No. 14/450,891, filed Aug. 4, 2014, now U.S. Pat. No. 9,998,493, which is a continuation application of U.S. patent application Ser. No. 12/237,874, filed Sep. 25, 2008 and entitled “SYSTEMS AND METHODS FOR KEY LOGGER PREVENTION SECURITY TECHNIQUES”, issued as U.S. Pat. No. 8,799,809 on Aug. 5, 2014, which is in turn a divisional patent application of U.S. patent application Ser. No. 12/132,693 filed Jun. 4, 2008, the entireties of which are hereby incorporated by reference herein. Further, the present application is related by subject matter to that disclosed in the following commonly assigned application, the entirety of which is hereby incorporated by reference herein: US patent application Ser. No. 12/237,887, filed Sep. 25, 2008 concurrently herewith and entitled “SYSTEMS AND METHODS FOR KEY LOGGER PREVENTION SECURITY TECHNIQUES”.
Identity theft and fraud pose threats to information security in today's electronic age. Having one's identity stolen or credit destroyed can be a traumatic event and take years of phone calls and paperwork to reestablish one's credit. In addition, financial institutions suffer losses because of the fraud committed by those who steal innocent victims' identities. Generally, in order to protect personal information, a user sets a password known only to her, so that access to a system and to her personal information is only accepted when the preset password is correctly input.
However, malware such as key loggers may be implemented in hardware or software to log user keystrokes and/or mouse clicks for later retrieval. Key loggers are dangerous because they can be installed remotely without the knowledge of the user of a computing device. At some future time, the person who installed the key logger may retrieve information captured by the key logger and download the key strokes and/or mouse clicks. From this information, usernames and passwords may be determined for websites accessed by those who have used the keyboard and/or mouse.
Efforts to defeat key loggers include the use of one-time passwords, biometric devices, and rotating “secret” information (e.g., high school attended, favorite color, etc.) that is entered by a user. However, these mechanisms require the user to enter information that is known about the user, thus the key logger is still effective at gathering useful information about the user. Other mechanisms, such as graphically entered information through number pads, etc. that are displayed on a web page, may be defeated by key loggers taking screen shots at each mouse click, which may enable the reconstruction of the graphically entered information.
An applet may be downloaded or provided to a web browser when a user visits a site in order to protect data input by the user from being captured by malicious software, such as key loggers. The applet may present a user input field in the web browser and may generate a random sequence of low-level key stroke or mouse click events within the input field when the user enters information, such as a username and/or password. A listening key logger will receive a large amount of random data, whereas the applet will receive and buffer only the actual user data that may be communicated to a remote site accessed by the user.
In an implementation, user-input data received in an input field in a user interface may be protected by executing an applet within the user interface and generating random data associated with the input field. The random data and the input data may be provided to a client device in which the applet is executing, while only the input data is communicated to the remote computing device.
In an implementation, electronic transactions between a client device and a remote server over a network connection are protected. A user input area is presented in a user interface, and when a focus event is received in the user input area, random data is generated that is associated with a type of user input area. User input data is received within the user input area and the random data and user input data are queued in the input buffer of a computing device. However, only the user input is communicated to the remote server.
This summary is provided to introduce a selection of concepts in a simplified form that are further described below in the detailed description. This summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.
The foregoing summary, as well as the following detailed description of illustrative embodiments, is better understood when read in conjunction with the appended drawings. For the purpose of illustrating the embodiments, there are shown in the drawings example constructions of the embodiments; however, the embodiments are not limited to the specific methods and instrumentalities disclosed. In the drawings:
and
The web browser 104 retrieves a web page 112 from the web server 106 identified by the URL 108, and displays the web page 112 on a screen (not shown) of the computing device 102. For a user to access or perform transactions with, e.g., the financial institution, the user may enter a registered account username and password into an appropriate field(s) 114 on the web page 112 in the web browser 104. The user may click a submit or “OK” key, or press enter on a keyboard to prompt the web browser 104 to transmit this information to the web server 106.
During the session with the web server 106, the user may enter many types of information in addition to a username and password, such as account numbers, buy or sell orders, transfer instructions, or credit card information that is transmitted to and from the web server 106 typically over a secure sockets connection (i.e., Secure HyperText Transfer Protocol (HTTPS)). When the user has completed his or her session, the user may log off and close the web browser 104.
If during the interaction with the web server 106, a key logger was running on the computing device 102, information entered by the user into the field(s) 114 on the web page 112 may be captured and retrieved at a later time for malicious purposes. This could result in fraudulent use of the information, identity theft, and defrauding of the service, merchant or institution that provides services through the web server 106.
In some implementations, to prevent a key logger from obtaining sensitive information, an applet may be loaded by the web browser 104 when the user accesses the web server 106. The applet may generate a random sequence of low-level keystroke events when executing within a field 114 that provides a large volume of random keystrokes to a key logger that may be running on the computing device 102. By providing a relatively large volume of keystroke events, the individual or entity that installed the key logger would have great difficulty determining real data input by the user from random data generated by the applet.
The applet may be a Java applet or ActiveX control that is loaded by the web browser 104. The built-in security features of Java applets ensure that an applet can only directly communicate with the web server from which it originated. The applet may be programmed to receive and buffer the keystrokes and/or mouse clicks that are actually entered by the user, while an input buffer on the computing device 102 would receive all input events, including the random events generated by the applet. As such, a key logger capturing input events would receive a large volume of data, while the web server 106 would only receive the user's actual keystrokes and/or mouse clicks.
The applet may provide an entry field on the web page 112 as the field 114 after it executes within the web page 112. The applet may be programmed to randomly generate a combination of numbers, letters or extended characters as if they were entered into the field 114. In some implementations, the applet may be programmed to enter random information in accordance with the type of field 114. For example, if the field 114 is an entry field for a Social Security number, then the random information may only be numeric information. If the field 114 is a birth date field, then the applet may be programmed to provide random data that appears to be a feasible date of birth. In some implementations, the applet may be programmed such that the frequency at which random data is generated appears to be, or is similar to, the frequency at which the user would type data into the field 114. Thus, it would appear to the key logger that a human is entering the data into the field 114.
In some implementations, the applet may use the java.awt.robot class to automatically provide input events to the input field 114 in the web browser 104. The java.awt.robot class may be used to generate native system input events for test automation, self-running demos, and other applications where control of the mouse and keyboard is needed. The events appear as native events, thus they appear as if they are actually coming from the mouse or keyboard connected to the computing device 102 and are not detectable to the key logger as being generated by a software application. In some implementations, the applet is not cached and is reload it each time the user accesses the web server 106 using the web browser 104.
In some implementations, JavaScript may be used in combination with the Java applet. For example, when an onFocus event occurs, such as when a user clicks into the field 114, the Java applet may begin randomly generating keystroke sequences. When the focus moves to another field, the Java applet would stop randomly generating keystroke sequences.
In some implementations, the field 114 may be a graphical keypad or other graphical input mechanism to allow a user to enter a PIN number or other identifying information by clicking the mouse on the keypad or graphic to enter the indentifying information. For example, the user may click on numbers displayed on the keypad to enter the PIN, or the user may click on a sequence of graphics only known to the user. The sequence of graphics may be, for example, a bird, a squirrel, a horse and a dog, which would then be correlated as the user's unique identification sequence.
In some implementations, the key logger data may include the click patterns of the user and/or screen shots to visually indentify the user's input sequence using a mouse. The visual sequence may be used to recreate the user's actions to gain authorized access to the user's account.
At 406, the applet produces random input data. For example, the applet may begin generating random keystrokes and/or mouse clicks. At 408, visual feedback is provided to the user. For example, the user may enter data into the field 114 and the data is echoed back on the web page 112 or some representation of the data (e.g., a “*” or a “•”) is displayed. The entered data is inserted into the random keystroke/mouse click data stream generated by the applet at 406.
At 410, the applet receives the actual data input by the user. For example, the applet may receive and buffer the input data from the field 114 so it may be communicated to the web server 106. At 412, the user input data is forwarded to the website. For example, in
The operational flow 400 may also be used to randomize graphical input. For example, at 406, random information may be provided to a display or screen buffer such that screenshots captured by the key logger contain random information. However, the visual feedback at 408 may represent the actual graphical information entered or clicked by the user.
In some implementations, the applet may reside on a hardware device that is inserted into the computing device 102 in order to provide random keystrokes and/or mouse clicks. For example, a USB device may be plugged into the computing device 102. The USB device may contain the applet, and appear to the computing device 102 as a keyboard and/or mouse. Thus, a key logger would be unable to distinguish between the USB device and keyboard and/or mouse of the computing device 102.
Exemplary Computing Arrangement
Numerous other general purpose or special purpose computing system environments or configurations may be used. Examples of well known computing systems, environments, and/or configurations that may be suitable for use include, but are not limited to, PCs, server computers, handheld or laptop devices, multiprocessor systems, microprocessor-based systems, network PCs, minicomputers, mainframe computers, embedded systems, distributed computing environments that include any of the above systems or devices, and the like.
Computer-executable instructions, such as program modules being executed by a computer, may be used. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. Distributed computing environments may be used where tasks are performed by remote processing devices that are linked through a communications network or other data transmission medium. In a distributed computing environment, program modules and other data may be located in both local and remote computer storage media including memory storage devices.
With reference to
Computing device 600 may have additional features and/or functionality. For example, computing device 600 may include additional storage (removable and/or non-removable) including, but not limited to, magnetic or optical disks or tape. Such additional storage is illustrated in
Computing device 600 typically includes a variety of computer-readable media. Computer-readable media can be any available media that can be accessed by computing device 600 and include both volatile and non-volatile media, and removable and non-removable media. By way of example, and not limitation, computer-readable media may comprise computer storage media and communication media.
Computer storage media include volatile and non-volatile, and removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. System memory 604, removable storage 608, and non-removable storage 610 are all examples of computer storage media. Computer storage media include, but are not limited to, RAM, ROM, Electrically Erasable Programmable Read-Only Memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by computing device 600. Any such computer storage media may be part of computing device 600.
Computing device 600 may also contain communication connection(s) 612 that allow the computing device 600 to communicate with other devices. Communication connection(s) 612 is an example of communication media. Communication media typically embody computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and include any information delivery media. The term “modulated data signal” means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media include wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, radio frequency (RF), infrared, and other wireless media. The term computer-readable media as used herein includes both storage media and communication media.
Computing device 600 may also have input device(s) 614 such as a keyboard, mouse, pen, voice input device, touch input device, etc. Output device(s) 616 such as a display, speakers, printer, etc. may also be included. All these devices are well known in the art and need not be discussed at length here.
Computing device 600 may be one of a plurality of computing devices 600 inter-connected by a network. As may be appreciated, the network may be any appropriate network, each computing device 600 may be connected thereto by way of communication connection(s) 612 in any appropriate manner, and each computing device 600 may communicate with one or more of the other computing devices 600 in the network in any appropriate manner. For example, the network may be a wired or wireless network within an organization or home or the like, and may include a direct or indirect coupling to an external network such as the Internet or the like.
It should be understood that the various techniques described herein may be implemented in connection with hardware or software or, where appropriate, with a combination of both. Thus, the methods and apparatus of the presently disclosed subject matter, or certain aspects or portions thereof, may take the form of program code (i.e., instructions) embodied in tangible media, such as floppy diskettes, CD-ROMs, hard drives, or any other machine-readable storage medium wherein, when the program code is loaded into and executed by a machine, such as a computer, the machine becomes an apparatus for practicing the presently disclosed subject matter. In the case of program code execution on programmable computers, the computing device generally includes a processor, a storage medium readable by the processor (including volatile and non-volatile memory and/or storage elements), at least one input device, and at least one output device. One or more programs may implement or utilize the processes described in connection with the presently disclosed subject matter, e.g., through the use of an application programming interface (API), reusable controls, or the like. Such programs may be implemented in a high level procedural or object-oriented programming language to communicate with a computer system. However, the program(s) can be implemented in assembly or machine language, if desired. In any case, the language may be a compiled or interpreted language and it may be combined with hardware implementations.
Although exemplary embodiments may refer to utilizing aspects of the presently disclosed subject matter in the context of one or more stand-alone computer systems, the subject matter is not so limited, but rather may be implemented in connection with any computing environment, such as a network or distributed computing environment. Still further, aspects of the presently disclosed subject matter may be implemented in or across a plurality of processing chips or devices, and storage may similarly be effected across a plurality of devices. Such devices might include personal computers, network servers, and handheld devices, for example.
Although the subject matter has been described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing the claims.
Voutour, Teddy Joseph Edmond, Morris, Michael Frank
Patent | Priority | Assignee | Title |
11979429, | Jun 04 2008 | United Services Automobile Association (USAA) | Systems and methods for key logger prevention security techniques |
Patent | Priority | Assignee | Title |
7797752, | Dec 17 2003 | RPX Corporation | Method and apparatus to secure a computing environment |
8799809, | Jun 04 2008 | United Services Automobile Association (USAA) | Systems and methods for key logger prevention security techniques |
9998493, | Jun 04 2008 | UNITED SERVICES AUTOMOBILE ASSOCIATION USAA | Systems and methods for key logger prevention security techniques |
20020140742, | |||
20030220823, | |||
20040158869, | |||
20050008994, | |||
20050266385, | |||
20060101128, | |||
20060129599, | |||
20060190720, | |||
20070067833, | |||
20070143593, | |||
20070209014, | |||
20070220594, | |||
20070240212, | |||
20070250920, | |||
20080109747, | |||
20080244430, | |||
20080257956, | |||
20080263672, | |||
20090125920, | |||
20090254572, | |||
20090254998, | |||
20090300368, | |||
20100023750, | |||
20110184847, | |||
WO2007006072, | |||
WO2007070014, |
Executed on | Assignor | Assignee | Conveyance | Frame | Reel | Doc |
Jun 27 2017 | MORRIS, MICHAEL FRANK | UNITED SERVICES AUTOMOBILE ASSOCIATION USAA | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 046017 | /0722 | |
Jul 17 2017 | VOUTOUR, TEDDY JOSEPH EDMOND | UNITED SERVICES AUTOMOBILE ASSOCIATION USAA | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 046017 | /0722 | |
Jun 07 2018 | United Services Automobile Association (USAA) | (assignment on the face of the patent) | / |
Date | Maintenance Fee Events |
Jun 07 2018 | BIG: Entity status set to Undiscounted (note the period is included in the code). |
May 13 2024 | REM: Maintenance Fee Reminder Mailed. |
Date | Maintenance Schedule |
Sep 22 2023 | 4 years fee payment window open |
Mar 22 2024 | 6 months grace period start (w surcharge) |
Sep 22 2024 | patent expiry (for year 4) |
Sep 22 2026 | 2 years to revive unintentionally abandoned end. (for year 4) |
Sep 22 2027 | 8 years fee payment window open |
Mar 22 2028 | 6 months grace period start (w surcharge) |
Sep 22 2028 | patent expiry (for year 8) |
Sep 22 2030 | 2 years to revive unintentionally abandoned end. (for year 8) |
Sep 22 2031 | 12 years fee payment window open |
Mar 22 2032 | 6 months grace period start (w surcharge) |
Sep 22 2032 | patent expiry (for year 12) |
Sep 22 2034 | 2 years to revive unintentionally abandoned end. (for year 12) |